Packages changed: MicroOS-release (20251016 -> 20251017) kernel-source (6.17.2 -> 6.17.3) libselinux libselinux-bindings lua54 python313 (3.13.7 -> 3.13.9) python313-core (3.13.7 -> 3.13.9) === Details === ==== MicroOS-release ==== Version update (20251016 -> 20251017) Subpackages: MicroOS-release-appliance MicroOS-release-dvd - automatically generated by openSUSE-release-tools/pkglistgen ==== kernel-source ==== Version update (6.17.2 -> 6.17.3) - Delete patches.suse/Revert-net-bonding-add-broadcast_neighbor-netlink-op.patch. - Delete patches.suse/Revert-net-bonding-add-broadcast_neighbor-option-for.patch. - Delete patches.suse/Revert-net-bonding-send-peer-notify-when-failure-rec.patch. About to be replaced by a proper patch in the next commit. - commit a9d395c - net: bonding: update the slave array for broadcast mode (bsc#1250894). - commit 5508f45 - wifi: iwlwifi: Add missing firmware info for bz-b0-* models (bsc#1252084). - commit 4ff36a8 - Linux 6.17.3 (bsc#1012628). - drm/amdgpu/vcn: Fix double-free of vcn dump buffer (bsc#1012628). - scsi: ufs: core: Fix PM QoS mutex initialization (bsc#1012628). - usb: cdns3: cdnsp-pci: remove redundant pci_disable_device() call (bsc#1012628). - arm64: dts: qcom: qcm2290: Disable USB SS bus instances in park mode (bsc#1012628). - usb: typec: tipd: Clear interrupts first (bsc#1012628). - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock (bsc#1012628). - net/9p: Fix buffer overflow in USB transport layer (bsc#1012628). - bus: fsl-mc: Check return value of platform_get_resource() (bsc#1012628). - pinctrl: check the return value of pinmux_ops::get_function_name() (bsc#1012628). - tee: fix register_shm_helper() (bsc#1012628). - thunderbolt: Fix use-after-free in tb_dp_dprx_work (bsc#1012628). - PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (bsc#1012628). - remoteproc: pru: Fix potential NULL pointer dereference in pru_rproc_set_ctable() (bsc#1012628). - PCI/AER: Avoid NULL pointer dereference in aer_ratelimit() (bsc#1012628). - sunrpc: fix null pointer dereference on zero-length checksum (bsc#1012628). - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info leak (bsc#1012628). - Input: atmel_mxt_ts - allow reset GPIO to sleep (bsc#1012628). - misc: fastrpc: Skip reference for DMA handles (bsc#1012628). - misc: fastrpc: fix possible map leak in fastrpc_put_args (bsc#1012628). - misc: fastrpc: Fix fastrpc_map_lookup operation (bsc#1012628). - misc: fastrpc: Save actual DMA size in fastrpc_map structure (bsc#1012628). - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe() (bsc#1012628). - selftests/mm: skip soft-dirty tests when CONFIG_MEM_SOFT_DIRTY is disabled (bsc#1012628). - mm: hugetlb: avoid soft lockup when mprotect to large memory area (bsc#1012628). - fbdev: simplefb: Fix use after free in simplefb_detach_genpds() (bsc#1012628). - KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (bsc#1012628). - ext4: fix checks for orphan inodes (bsc#1012628). - ext4: fix potential null deref in ext4_mb_init() (bsc#1012628). - ksmbd: add max ip connections parameter (bsc#1012628). - ksmbd: fix error code overwriting in smb2_get_info_filesystem() (bsc#1012628). - ksmbd: Fix race condition in RPC handle list access (bsc#1012628). - mm/ksm: fix flag-dropping behavior in ksm_madvise (bsc#1012628). - LoongArch: BPF: Fix uninitialized symbol 'retval_off' (bsc#1012628). - LoongArch: BPF: Remove duplicated flags check (bsc#1012628). - LoongArch: BPF: No text_poke() for kernel text (bsc#1012628). - LoongArch: BPF: Remove duplicated bpf_flush_icache() (bsc#1012628). - LoongArch: BPF: Make error handling robust in arch_prepare_bpf_trampoline() (bsc#1012628). - LoongArch: BPF: Make trampoline size stable (bsc#1012628). - LoongArch: BPF: Don't align trampoline size (bsc#1012628). - LoongArch: BPF: No support of struct argument in trampoline programs (bsc#1012628). - LoongArch: BPF: Sign-extend struct ops return values properly (bsc#1012628). - pwm: loongson: Fix LOONGSON_PWM_FREQ_DEFAULT (bsc#1012628). - LoongArch: Automatically disable kaslr if boot from kexec_file (bsc#1012628). - dm: fix NULL pointer dereference in __dm_suspend() (bsc#1012628). - dm: fix queue start/stop imbalance under suspend/load/resume races (bsc#1012628). - tracing: Stop fortify-string from warning in tracing_mark_raw_write() (bsc#1012628). - tracing: Fix tracing_mark_raw_write() to use buf and not ubuf (bsc#1012628). - tracing: Have trace_marker use per-cpu data to read user space (bsc#1012628). - tracing: Fix irqoff tracers on failure of acquiring calltime (bsc#1012628). - tracing: Fix wakeup tracers on failure of acquiring calltime ... changelog too long, skipping 911 lines ... - commit f00dc5b ==== libselinux ==== Subpackages: libselinux1 selinux-tools - Ship license file (bsc#1252160) - Add man_selinux_disabled_mismatch_kernel_config.patch to explain in the selinux(8) man page to not disable SELinux via /etc/selinux/config and enable it at the same time via kernel cmd line (bsc#1246549) ==== libselinux-bindings ==== - Ship license file (bsc#1252160) ==== lua54 ==== - Clean up of the SPEC file. ==== python313 ==== Version update (3.13.7 -> 3.13.9) - Update to 3.13.9: - Library - gh-139783: Fix inspect.getsourcelines() for the case when a decorator is followed by a comment or an empty line. - Update to 3.13.8: - macOS - gh-124111: Update macOS installer to use Tcl/Tk 8.6.17. - gh-139573: Updated bundled version of OpenSSL to 3.0.18. - Windows - gh-139573: Updated bundled version of OpenSSL to 3.0.18. - gh-138896: Fix error installing C runtime on non-updated Windows machines - Tools/Demos - gh-139330: SBOM generation tool didn’t cross-check the version and checksum values against the Modules/expat/refresh.sh script, leading to the values becoming out-of-date during routine updates. - gh-137873: The iOS test runner has been simplified, resolving some issues that have been observed using the runner in GitHub Actions and Azure Pipelines test environments. - Tests - gh-139208: Fix regrtest --fast-ci --verbose: don’t ignore the - -verbose option anymore. Patch by Victor Stinner. - Security - gh-139400: xml.parsers.expat: Make sure that parent Expat parsers are only garbage-collected once they are no longer referenced by subparsers created by ExternalEntityParserCreate(). Patch by Sebastian Pipping. - gh-139283: sqlite3: correctly handle maximum number of rows to fetch in Cursor.fetchmany and reject negative values for Cursor.arraysize. Patch by Bénédikt Tran. - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser according to the HTML5 standard: ] ]> and ]] > no longer end the CDATA section. Add private method _set_support_cdata() which can be used to specify how to parse <[CDATA[ — as a CDATA section in foreign content (SVG or MathML) or as a bogus comment in the HTML namespace. - Library - gh-139312: Upgrade bundled libexpat to 2.7.3 - gh-139289: Do a real lazy-import on rlcompleter in pdb and restore the existing completer after importing rlcompleter. - gh-139210: Fix use-after-free when reporting unknown event in xml.etree.ElementTree.iterparse(). Patch by Ken Jin. - gh-138860: Lazy import rlcompleter in pdb to avoid deadlock in subprocess. - gh-112729: Fix crash when calling _interpreters.create when the process is out of memory. - gh-139076: Fix a bug in the pydoc module that was hiding functions in a Python module if they were implemented in an extension module and the module did not have __all__. - gh-138998: Update bundled libexpat to 2.7.2 - gh-130567: Fix possible crash in locale.strxfrm() due to a platform bug on macOS. - gh-138779: Support device numbers larger than 2**63-1 for the st_rdev field of the os.stat_result structure. - gh-128636: Fix crash in PyREPL when os.environ is overwritten with an invalid value for mac - gh-88375: Fix normalization of the robots.txt rules and URLs in the urllib.robotparser module. No longer ignore trailing ?. Distinguish raw special characters ?, = and & from the percent-encoded ones. - gh-138515: email is added to Emscripten build. - gh-111788: Fix parsing errors in the urllib.robotparser module. Don’t fail trying to parse weird paths. Don’t fail trying to decode non-UTF-8 robots.txt files. - gh-138432: zoneinfo.reset_tzpath() will now convert any os.PathLike objects it receives into strings before adding them to TZPATH. It will raise TypeError if anything other than a string is found after this conversion. If given an os.PathLike object that represents a relative path, it will now raise ValueError instead of TypeError, and present a more informative error message. - gh-138008: Fix segmentation faults in the ctypes module due to invalid argtypes. Patch by Dung Nguyen. - gh-60462: Fix locale.strxfrm() on Solaris (and possibly other platforms). - gh-138204: Forbid expansion of shared anonymous memory maps on Linux, which caused a bus error. - gh-138010: Fix an issue where defining a class with a @warnings.deprecated-decorated base class may not invoke the correct __init_subclass__() method in cases involving multiple inheritance. Patch by Brian Schubert. - gh-138133: Prevent infinite traceback loop when sending CTRL^C to Python through strace. - gh-134869: Fix an issue where pressing Ctrl+C during tab completion in the REPL would leave the autocompletion menu in a corrupted state. - gh-137317: inspect.signature() now correctly handles classes that use a descriptor on a wrapped __init__() or __new__() method. Contributed by Yongyu Yan. - gh-137754: Fix import of the zoneinfo module if the C implementation of the datetime module is not available. - gh-137490: Handle ECANCELED in the same way as EINTR in signal.sigwaitinfo() on NetBSD. - gh-137477: Fix inspect.getblock(), inspect.getsourcelines() and inspect.getsource() for generator expressions. - gh-137017: Fix threading.Thread.is_alive to remain True until the underlying OS thread is fully cleaned up. This avoids false negatives in edge cases involving thread monitoring or premature ... changelog too long, skipping 67 lines ... Patch by Bénédikt Tran. ==== python313-core ==== Version update (3.13.7 -> 3.13.9) Subpackages: libpython3_13-1_0 python313-base - Update to 3.13.9: - Library - gh-139783: Fix inspect.getsourcelines() for the case when a decorator is followed by a comment or an empty line. - Update to 3.13.8: - macOS - gh-124111: Update macOS installer to use Tcl/Tk 8.6.17. - gh-139573: Updated bundled version of OpenSSL to 3.0.18. - Windows - gh-139573: Updated bundled version of OpenSSL to 3.0.18. - gh-138896: Fix error installing C runtime on non-updated Windows machines - Tools/Demos - gh-139330: SBOM generation tool didn’t cross-check the version and checksum values against the Modules/expat/refresh.sh script, leading to the values becoming out-of-date during routine updates. - gh-137873: The iOS test runner has been simplified, resolving some issues that have been observed using the runner in GitHub Actions and Azure Pipelines test environments. - Tests - gh-139208: Fix regrtest --fast-ci --verbose: don’t ignore the - -verbose option anymore. Patch by Victor Stinner. - Security - gh-139400: xml.parsers.expat: Make sure that parent Expat parsers are only garbage-collected once they are no longer referenced by subparsers created by ExternalEntityParserCreate(). Patch by Sebastian Pipping. - gh-139283: sqlite3: correctly handle maximum number of rows to fetch in Cursor.fetchmany and reject negative values for Cursor.arraysize. Patch by Bénédikt Tran. - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser according to the HTML5 standard: ] ]> and ]] > no longer end the CDATA section. Add private method _set_support_cdata() which can be used to specify how to parse <[CDATA[ — as a CDATA section in foreign content (SVG or MathML) or as a bogus comment in the HTML namespace. - Library - gh-139312: Upgrade bundled libexpat to 2.7.3 - gh-139289: Do a real lazy-import on rlcompleter in pdb and restore the existing completer after importing rlcompleter. - gh-139210: Fix use-after-free when reporting unknown event in xml.etree.ElementTree.iterparse(). Patch by Ken Jin. - gh-138860: Lazy import rlcompleter in pdb to avoid deadlock in subprocess. - gh-112729: Fix crash when calling _interpreters.create when the process is out of memory. - gh-139076: Fix a bug in the pydoc module that was hiding functions in a Python module if they were implemented in an extension module and the module did not have __all__. - gh-138998: Update bundled libexpat to 2.7.2 - gh-130567: Fix possible crash in locale.strxfrm() due to a platform bug on macOS. - gh-138779: Support device numbers larger than 2**63-1 for the st_rdev field of the os.stat_result structure. - gh-128636: Fix crash in PyREPL when os.environ is overwritten with an invalid value for mac - gh-88375: Fix normalization of the robots.txt rules and URLs in the urllib.robotparser module. No longer ignore trailing ?. Distinguish raw special characters ?, = and & from the percent-encoded ones. - gh-138515: email is added to Emscripten build. - gh-111788: Fix parsing errors in the urllib.robotparser module. Don’t fail trying to parse weird paths. Don’t fail trying to decode non-UTF-8 robots.txt files. - gh-138432: zoneinfo.reset_tzpath() will now convert any os.PathLike objects it receives into strings before adding them to TZPATH. It will raise TypeError if anything other than a string is found after this conversion. If given an os.PathLike object that represents a relative path, it will now raise ValueError instead of TypeError, and present a more informative error message. - gh-138008: Fix segmentation faults in the ctypes module due to invalid argtypes. Patch by Dung Nguyen. - gh-60462: Fix locale.strxfrm() on Solaris (and possibly other platforms). - gh-138204: Forbid expansion of shared anonymous memory maps on Linux, which caused a bus error. - gh-138010: Fix an issue where defining a class with a @warnings.deprecated-decorated base class may not invoke the correct __init_subclass__() method in cases involving multiple inheritance. Patch by Brian Schubert. - gh-138133: Prevent infinite traceback loop when sending CTRL^C to Python through strace. - gh-134869: Fix an issue where pressing Ctrl+C during tab completion in the REPL would leave the autocompletion menu in a corrupted state. - gh-137317: inspect.signature() now correctly handles classes that use a descriptor on a wrapped __init__() or __new__() method. Contributed by Yongyu Yan. - gh-137754: Fix import of the zoneinfo module if the C implementation of the datetime module is not available. - gh-137490: Handle ECANCELED in the same way as EINTR in signal.sigwaitinfo() on NetBSD. - gh-137477: Fix inspect.getblock(), inspect.getsourcelines() and inspect.getsource() for generator expressions. - gh-137017: Fix threading.Thread.is_alive to remain True until the underlying OS thread is fully cleaned up. This avoids false negatives in edge cases involving thread monitoring or premature ... changelog too long, skipping 67 lines ... Patch by Bénédikt Tran.